Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
distributed-press-social
Advanced tools
A Social Inbox for Decentralized Publishing and ActivityPub
This server runs a minimal implementation of an ActivityPub Inbox and Outbox.
Here's how to use it:
npm run generate-keypair
in this repohttpa://social.example.com
@username@social.example.com
which will be used as the username
in parameters/v1/:username/
with JSON that looks like {actorURL, publicKeyId, keypair: {publicKeyPEM,privateKeyPem}}
to initialize your inbox. The server will use your keypair to sign HTTP requests for activities you send to your outbox. You can also use the client.setInfo()
API.inbox
property to point at https://yourserver/v1/:username/inbox
/v1/:username/outbox
Check out the available API endpoints either in the swagger docs at the https://yourserver/v1/docs/
or in the JS client API in /src/client/index.js
.
This project requires Node.js Version 19.x and NPM.
The code is written using TypeScript in the src
folder which gets compiled into the dist
folder.
npm run dev
npm run lint
dist
: npm run build
npm run start
/scripts
: Scripts for doing tasks like importing blocklists/admins or generating keypairs/src/
Main folder for source code/src/server/
Source code for the inbox server/src/server/api/
HTTP routes/src/client/
Implementation of a JS client to talk to the inbox via fetch
FAQs
API for the Distributed Press Social Inbox
The npm package distributed-press-social receives a total of 2 weekly downloads. As such, distributed-press-social popularity was classified as not popular.
We found that distributed-press-social demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.